Consumer Health Data Privacy Policy

1. Categories of consumer health data we collect, and why

• Information about sexual and reproductive health. Sexual orientation, and information you choose to include in your profile, prompts, or messages that relates to sexual health or activity. Collected to operate matching and to let you present yourself as you choose.
• Gender-affirming care information. Gender identity, including status as nonbinary or transgender, and any information indicating interest in or use of gender-affirming products or services. Collected to operate matching and profile presentation.
• Biometric data. A facial image captured during live-capture photo verification, used solely to compare against the photos on the account. Unresolved: retention period and deletion trigger must be stated exactly here.
• Inferences drawn from the above. Compatibility and recommendation signals derived by automated processing that may use the categories above. Used to order and select what appears in discovery.

2. Categories of sources

• Directly from you — registration, profile fields and prompts, verification capture, messages, and settings.
• From your device — as generated through your use of the SHY app or website.
• Derived by SHY — inferences produced by automated processing of the data above.

3. Categories of consumer health data that are shared

SHY does not sell consumer health data. Consumer health data is shared only with service providers acting on SHY's instructions and only as needed to operate the service, and where you make information visible to other members by choosing to publish it on your profile.

SHY does not use third-party advertising or analytics trackers to collect consumer health data, and does not share consumer health data for cross-context behavioural advertising.

4. Third parties and affiliates with whom data is shared

Categories of third parties: cloud hosting and database providers; authentication providers; push-notification providers; error-monitoring providers; email delivery providers.

Specific affiliates: SHY Technologies LLC has no affiliates. Unresolved: Washington requires specific affiliates to be named; confirm this remains accurate at publication.

5. How consumer health data is processed

Consumer health data is stored in access-controlled databases, restricted by row-level security so that a member's data is reachable only by that member and by authorised SHY systems. It is processed to provide the features you use — profile presentation, discovery and matching, verification, and safety review — and is not processed for advertising.

6. Your rights, and how to exercise them

• Access. Request confirmation of whether SHY collects, shares, or sells your consumer health data, and a list of third parties with whom it has been shared.
• Withdraw consent. Withdraw consent to the collection or sharing of your consumer health data at any time.
• Delete. Request deletion of your consumer health data.

How to make a request: email [email protected] with the subject “Consumer Health Data Request,” or use the privacy tools in the app. Include the email address on your account so we can locate it. SHY will verify that a request comes from you or an authorised agent before acting on it.

Response time and appeal: Unresolved — must state the response window and the appeal route before publication.

7. Consent

SHY requests two separate consents, neither of which is bundled into acceptance of the Terms of Service: one to collect consumer health data beyond what is necessary to provide the service you requested, and a separate consent to share it. Each may be withdrawn at any time without affecting the lawfulness of processing before withdrawal.

8. Changes to this policy

If SHY makes a material change to this policy, it will post the updated policy at this address with a new effective date and notify affected members before the change takes effect for previously collected data. Prior versions will be made available on request.